Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa
File: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (raw, json)
Hash identifier: uHjkLxfLryVxk+EGLXhyq0SFDKEzQBHb9mjNodbPHdI=
Subject key identifier: 3A:55:E4:F7:C5:37:4D:BE:6E:98:E1:C3:65:5E:B6:81:76:2D:19:3B
Certificate issuer: /CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3
Certificate serial: 5CE4EFADA91B7832D5BEACEEB5E5C299D3D01498
Authority key identifier: 53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa
Signing time: Sun 24 Sep 2023 18:39:58 +0000
ROA not before: Sun 24 Sep 2023 18:34:58 +0000
ROA not after: Sun 22 Sep 2024 18:39:58 +0000
asID: 200179
IP address blocks: 2a05:dfc1:9500::/40 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:e4:ef:ad:a9:1b:78:32:d5:be:ac:ee:b5:e5:c2:99:d3:d0:14:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3
Validity
Not Before: Sep 24 18:34:58 2023 GMT
Not After : Sep 22 18:39:58 2024 GMT
Subject: CN=3A55E4F7C5374DBE6E98E1C3655EB681762D193B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:42:81:de:e3:af:bb:b3:9e:a4:7b:9f:fb:
65:f8:7e:e3:58:3d:c0:b8:c9:ee:7f:7c:c6:e6:af:
a9:67:ec:31:5d:72:97:ba:ba:e8:ee:d6:e4:43:a0:
8d:d0:e7:a3:5d:93:f2:a2:1e:b7:c9:c6:2d:ac:32:
e4:83:60:07:02:ac:3c:f1:c8:7f:67:c2:2c:c2:3c:
25:1f:5e:0e:0e:c2:19:83:77:ca:45:25:ad:2b:90:
15:13:ad:d5:47:c5:98:6c:c3:78:85:a6:fa:c8:b5:
2b:c7:e4:87:d0:dd:52:a0:cc:1c:d5:32:b4:b4:13:
4e:2d:6b:0a:d7:56:6d:c1:b5:30:c7:5f:aa:a8:52:
38:7d:b4:1c:07:52:9a:bc:79:a2:d1:7e:47:06:f1:
e9:16:a9:b4:ef:f5:67:21:64:b9:03:f9:d2:98:41:
0e:b8:91:ac:de:ee:7c:bd:9c:5b:4a:79:e1:61:a2:
bc:8e:d6:52:d4:fa:ad:93:1c:b3:e4:fb:39:94:28:
97:69:b2:6c:e7:c1:1e:91:84:4c:db:8d:b0:56:22:
71:6e:70:7e:5e:94:1d:ab:5b:5d:88:d0:26:91:dd:
dd:d7:f6:99:a0:c7:f3:2a:26:3a:80:63:63:31:a6:
74:7f:26:d5:37:84:b6:82:95:02:83:f5:02:2f:30:
20:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:55:E4:F7:C5:37:4D:BE:6E:98:E1:C3:65:5E:B6:81:76:2D:19:3B
X509v3 Authority Key Identifier:
keyid:53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:9500::/40
Signature Algorithm: sha256WithRSAEncryption
9f:6a:33:ed:15:c8:22:f3:cd:57:eb:47:f1:c9:4d:95:b8:60:
46:68:da:02:82:e2:9c:99:59:05:4b:47:85:f2:f5:d1:fe:ea:
8c:67:14:28:19:d4:20:97:22:1e:85:1c:22:87:b7:18:d3:7b:
2c:09:00:2d:34:cd:ee:90:e2:b4:4b:12:37:1c:27:ff:8e:b3:
02:22:a4:dc:a8:ba:68:4c:3c:84:75:2b:50:b5:d5:6b:75:29:
5b:60:e2:df:aa:c6:44:9a:dd:aa:1b:08:1d:0e:63:0b:9a:22:
4f:14:d2:02:a8:f2:ee:7d:d6:88:08:52:2c:e5:cd:e3:65:ff:
01:88:22:ff:23:d1:58:49:5b:41:2d:c5:24:1f:0c:ec:15:92:
81:cb:35:a1:37:0f:06:0f:5a:3c:d6:3a:c6:05:75:9e:f2:3a:
18:6a:94:5e:00:f4:ab:56:b9:75:9e:da:16:bf:70:a9:d7:ba:
4d:f0:de:b0:25:a0:b0:1e:e4:4d:06:51:98:0d:d8:1e:4f:18:
89:d8:d9:17:76:06:52:b6:bf:3e:1e:4f:bc:e5:97:f4:22:ad:
89:fb:c5:ac:01:02:4e:8f:75:cc:da:ec:54:56:f1:55:49:b7:
5f:17:66:c7:1c:57:91:0d:28:fe:12:36:1d:56:fa:74:25:c0:
21:33:54:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 01:21:52 2024 by rpki-client on console-fra.rpki-client.org